RHSA-2026:33486CriticalCVSS 8.8

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Published
June 30, 2026
Last Modified
August 6, 2026

🔗 CVE IDs covered (7)

CVE-2026-43503 →CVE-2026-46243 →CVE-2026-46300 →CVE-2026-46333 →CVE-2026-31431 →CVE-2026-43037 →CVE-2026-43284 →

📋 Description

CVE-2026-31431 — kernel: crypto: algif_aead - Revert to operating out-of-place CVE-2026-43037 — kernel: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() CVE-2026-43284 — kernel: "Dirty Frag" ESP XFRM variant is a new universal Local Privilege Escalation (LPE) vulnerability in the Linux kernel CVE-2026-43503 — kernel: net: skbuff: propagate shared-frag marker through frag-transfer helpers CVE-2026-46243 — kernel: Linux kernel: smb: client: reject userspace cifs.spnego descriptions CVE-2026-46300 — kernel: "Fragnesia" is a variant of Dirty Frag vulnerability in the ESP/XFRM leading to Local Privilege Escalation (LPE) vulnerability in the Linux kernel CVE-2026-46333 — kernel: Read root-owned files as an unprivileged user

🎯 Affected products48

  • NVIDIA for RHEL 10
  • kernel-0:6.12.0-231.12.el10nv.aarch64 as a component of NVIDIA for RHEL 10
  • kernel-0:6.12.0-231.12.el10nv.src as a component of NVIDIA for RHEL 10
  • kernel-64k-0:6.12.0-231.12.el10nv.aarch64 as a component of NVIDIA for RHEL 10
  • kernel-64k-core-0:6.12.0-231.12.el10nv.aarch64 as a component of NVIDIA for RHEL 10
  • kernel-64k-debug-0:6.12.0-231.12.el10nv.aarch64 as a component of NVIDIA for RHEL 10
  • kernel-64k-debug-core-0:6.12.0-231.12.el10nv.aarch64 as a component of NVIDIA for RHEL 10
  • kernel-64k-debug-debuginfo-0:6.12.0-231.12.el10nv.aarch64 as a component of NVIDIA for RHEL 10
  • kernel-64k-debug-modules-0:6.12.0-231.12.el10nv.aarch64 as a component of NVIDIA for RHEL 10
  • kernel-64k-debug-modules-core-0:6.12.0-231.12.el10nv.aarch64 as a component of NVIDIA for RHEL 10
  • kernel-64k-debug-modules-extra-0:6.12.0-231.12.el10nv.aarch64 as a component of NVIDIA for RHEL 10
  • kernel-64k-debuginfo-0:6.12.0-231.12.el10nv.aarch64 as a component of NVIDIA for RHEL 10
  • kernel-64k-modules-0:6.12.0-231.12.el10nv.aarch64 as a component of NVIDIA for RHEL 10
  • kernel-64k-modules-core-0:6.12.0-231.12.el10nv.aarch64 as a component of NVIDIA for RHEL 10
  • kernel-64k-modules-extra-0:6.12.0-231.12.el10nv.aarch64 as a component of NVIDIA for RHEL 10
  • kernel-abi-stablelists-0:6.12.0-231.12.el10nv.noarch as a component of NVIDIA for RHEL 10
  • kernel-core-0:6.12.0-231.12.el10nv.aarch64 as a component of NVIDIA for RHEL 10
  • kernel-debug-0:6.12.0-231.12.el10nv.aarch64 as a component of NVIDIA for RHEL 10
  • kernel-debug-core-0:6.12.0-231.12.el10nv.aarch64 as a component of NVIDIA for RHEL 10
  • kernel-debug-debuginfo-0:6.12.0-231.12.el10nv.aarch64 as a component of NVIDIA for RHEL 10
  • kernel-debug-devel-0:6.12.0-231.12.el10nv.aarch64 as a component of NVIDIA for RHEL 10
  • kernel-debug-devel-matched-0:6.12.0-231.12.el10nv.aarch64 as a component of NVIDIA for RHEL 10
  • kernel-debug-modules-0:6.12.0-231.12.el10nv.aarch64 as a component of NVIDIA for RHEL 10
  • kernel-debug-modules-core-0:6.12.0-231.12.el10nv.aarch64 as a component of NVIDIA for RHEL 10
  • kernel-debug-modules-extra-0:6.12.0-231.12.el10nv.aarch64 as a component of NVIDIA for RHEL 10
  • kernel-debuginfo-0:6.12.0-231.12.el10nv.aarch64 as a component of NVIDIA for RHEL 10
  • kernel-debuginfo-common-aarch64-0:6.12.0-231.12.el10nv.aarch64 as a component of NVIDIA for RHEL 10
  • kernel-devel-0:6.12.0-231.12.el10nv.aarch64 as a component of NVIDIA for RHEL 10
  • kernel-devel-matched-0:6.12.0-231.12.el10nv.aarch64 as a component of NVIDIA for RHEL 10
  • kernel-doc-0:6.12.0-231.12.el10nv.noarch as a component of NVIDIA for RHEL 10
  • +18 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Workaround: See the security bulletin for a detailed mitigation procedure. Workaround: Mitigation for this issue is to skip loading the affected module `ip6_tunnel` onto the system till we have a fix available, this can be done by a blacklist mechanism, this will ensure the driver is not loaded at the boot time. ~~~ How do I blacklist a kernel module to prevent it from loading automatically? https://access.redhat.com/solutions/41278 ~~~ We may also want to detection and monitoring an affected system as below: ~~~ Monitor for exploitation attempts: # Enable kernel audit for IPv6 tunnel operations auditctl -a always,exit -F arch=b64 -S socket -F a0=10 -F a1=3 -k ipv6_tunnel # Monitor system logs for kernel panics/crashes journalctl -k -p err -f | grep -i "ip6_tunnel\|icmp\|stack" ~~~

🔗 References (35)